ARCHIVED CERTIFIED PRODUCTS AND SYSTEMS

Hewlett Packard Enterprise (HPE)

Archive

ArcSight ESM is a Security Information and Event Management (SIEM) solution that combines event correlation and security analytics to identify and prioritize threats in real time and remediate incidents early. It is able to concentrate, normalize, analyze, and report the results of its analysis of security event data generated by various Intrusion Detection System (IDS) sensors and scanners in the operational environment. ArcSight ESM provides authorized users with capabilities to monitor events, correlate events for in-depth investigation and analysis, and resolve events with automated escalation procedures and actions.

The following security functions are implemented by the TOE:

• Security Audit
• Identification adn Authentication
• Security Management
• Protection of the TSF
• Trusted Path/Channels
• Intrusion Detection System

C076

Lee Ivy
Engineering Director, ArcSight
Hewlett Packard Enterprise Security Products

lee.ivy@hpe.com
Office: 650-265-3457
Mobile: 408-386-1700
1160 Enterprise Way (Moffett Towers Building G, 7th Floor),
Sunnyvale CA 94089

Network and Network-Related Devices and Systems

EAL2

Hewlett Packard Enterprise ArcSight Enterprise Security Manager (ESM)

14-12-2016

14-12-2021

CCRA

Security Target (ST)

Certification Report (CR)

PROJECT ID
M007

ASSURANCE LEVEL
EAL2

PRODUCT NAME AND VERSION
Hewlett Packard Enterprise Security ArcSight ESM v6.11.0

PRODUCT TYPE
Security Information and Event Management (SIEM)

PRODUCT SPONSOR / DEVELOPER
Hewlett Packard Enterprise

PRODUCT SPONSOR / DEVELOPER CONTACT DETAILS

Lee Ivy
Engineering Director, ArcSight
Hewlett Packard Enterprise Security Products

lee.ivy@hpe.com
Office: 650-265-3457 Mobile: 408-386-1700
1160 Enterprise Way (Moffett Towers Building G, 7th Floor),
Sunnyvale CA 94089

ArcSight ESM is a Security Information and Event Management (SIEM) solution that combines event correlation and security analytics to identify and prioritize threats in real time and remediate incidents early. It is able to concentrate, normalize, analyze, and report the results of its analysis of security event data generated by various Intrusion Detection System (IDS) sensors and scanners in the operational environment. ArcSight ESM provides authorized users with capabilities to monitor events, correlate events for in-depth investigation and analysis, and resolve events with automated escalation procedures and actions.

The following security functions are implemented by the TOE:

• Security Audit
• Identification adn Authentication
• Security Management
• Protection of the TSF
• Trusted Path/Channels
• Intrusion Detection System

REPORTS

Maintenenace Security Target

Maintenence Report

Security Information and Event Management (SIEM)